Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3139392e38332e3130302e302f32332d3234203d3e203137323232.roa
File:                     3139392e38332e3130302e302f32332d3234203d3e203137323232.roa (raw, json)
Hash identifier:          UDNdpnRH8mjS/hYPJ6DQmUT8EhaNlYmydQDkS4GzXIo=
Subject key identifier:   21:42:F4:11:27:18:4F:EB:16:AF:11:A6:F9:AD:31:22:B3:5E:8F:EA
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       6A468F603048C7F91C6A0F749E6EFBB46A59678B
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3139392e38332e3130302e302f32332d3234203d3e203137323232.roa
Signing time:             Thu 06 Mar 2025 15:34:22 +0000
ROA not before:           Thu 06 Mar 2025 15:29:22 +0000
ROA not after:            Thu 05 Mar 2026 15:34:22 +0000
asID:                     17222
IP address blocks:        199.83.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 21:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:46:8f:60:30:48:c7:f9:1c:6a:0f:74:9e:6e:fb:b4:6a:59:67:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Mar  6 15:29:22 2025 GMT
            Not After : Mar  5 15:34:22 2026 GMT
        Subject: CN=2142F41127184FEB16AF11A6F9AD3122B35E8FEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:9c:a5:d9:b2:26:bf:fc:3f:a8:bb:35:8c:
                    f6:21:f4:4b:3f:e5:6e:ce:64:8e:fc:65:d5:44:45:
                    05:48:cc:f6:40:c9:c1:d4:87:3a:16:a9:fc:ec:53:
                    c4:61:2d:3f:d3:00:d1:cd:b1:84:db:bf:94:6e:57:
                    5d:10:fe:5b:f8:2c:0c:8d:f6:e2:07:75:26:a2:db:
                    ee:05:e4:16:0b:ed:15:a5:15:f5:e6:8c:01:eb:de:
                    c3:86:d9:bf:4b:82:cb:07:2b:9a:db:d5:5c:e9:71:
                    10:34:cf:b1:52:13:ce:61:f3:77:31:51:84:0c:e4:
                    b4:dd:51:ab:d7:b2:d3:1c:e2:d3:2c:b9:cf:53:98:
                    ba:4d:a5:2b:71:bc:3a:14:9d:01:47:c8:14:e8:af:
                    97:19:ee:33:51:80:ee:3a:3d:62:37:aa:83:2b:9f:
                    2a:d5:04:36:90:1d:5a:88:94:6a:2a:aa:1a:52:2e:
                    d3:bc:e3:a1:54:6a:22:02:70:2c:23:23:0a:03:52:
                    aa:b7:5d:0a:47:dd:86:ff:7b:92:c7:ba:19:ec:1f:
                    c7:57:1e:f2:ef:50:ca:05:c9:23:7f:e0:31:aa:70:
                    5d:1f:e5:dd:98:f6:93:4f:35:e0:be:79:a9:71:e5:
                    05:72:21:1f:fa:b9:7d:af:2f:88:5b:ec:1c:46:db:
                    2d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:42:F4:11:27:18:4F:EB:16:AF:11:A6:F9:AD:31:22:B3:5E:8F:EA
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3139392e38332e3130302e302f32332d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:10:5c:3b:61:01:6a:91:3d:45:f4:40:17:70:d5:26:db:00:
         e1:34:a9:32:40:2f:21:ab:b7:1b:94:a7:fa:f0:2e:69:91:65:
         14:34:d5:17:ac:80:fd:e4:5e:06:d4:43:5e:97:b5:73:0b:c2:
         38:24:74:ca:6d:71:bf:f5:ba:05:43:a1:4b:a0:59:c4:db:e3:
         96:d4:6c:fc:0a:45:c8:c2:c2:03:25:86:26:fe:2f:c0:68:43:
         1e:a1:5e:1a:88:d6:d0:64:f2:6a:4f:9d:75:7b:e9:8a:80:c4:
         38:f9:be:72:4c:75:dc:64:cf:a5:97:34:7b:28:f5:1c:43:6e:
         04:d2:a8:fa:81:86:6c:ac:b2:ef:ab:2b:f8:b3:14:78:55:09:
         c5:93:47:e1:23:8f:67:dd:43:30:5b:48:47:98:b3:1e:78:c0:
         a3:ef:97:0f:4c:e1:c2:44:f4:69:f1:47:6a:5a:83:f1:df:b6:
         a3:ef:3b:e1:90:be:44:82:c0:5e:00:30:d0:fd:55:17:78:39:
         bd:8a:2c:dc:64:34:4c:67:5f:7f:53:39:bc:45:65:65:33:97:
         69:ea:cc:12:e6:2b:f6:20:c9:41:34:f1:b2:26:7a:7f:1e:48:
         ef:9b:65:49:54:e5:4b:ed:ea:ee:bb:8a:83:d3:ec:72:e6:94:
         ae:93:6f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:32:09 2025 by rpki-client